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TRANSMISSION CONTROLS ON 
DATA COMMUNICATION SUCH AS E-MAIL 

This invention relates to method and apparatus for applying transmission 
controls to e-mails, and similar data communications over a network 
providing access to a very large number of users, primarily publicly 
usable networks such as the internet, but also an intranet. 

BACKGROUND TO THE INVENTION 

With current e-mail transmission systems once an instruction to send an 
e-mail to a specified recipient address has been given it is generally not 
possible to prevent the e-mail being received by that address if the sender 
has second thoughts as to what should have been sent and to whom. This 
is particularly annoying when the sender knows that the intended 
recipient probably has not yet viewed the content of the e-mail. 

Quite often the circumstances which led to the sending of the e-mail can 
change shortly after the e-mail was sent, and the sender of the e-mail 
would like the opportunity to revise or even withdraw the message sent. 

In sending e-mails via the internet, because of the extremely large 
number of users and consequently e-mail addresses, any mistake in an 
e-mail address will probably result in the e-mail being received by 
someone who happens to have the address that was wrongly given. This 
can sometimes have serious consequences because important confidential 
information may be released to an unscrupulous recipient who may then 
seek to make use of that information for profit. 



SUMMARY OF THE INVENTION 

In brief, we have appreciated that with advantage an e-mail system can 
send references to locations, for example URLs. Uniform Resource 
Locators, rather than sending the message itself, and the message content 
5 can be automatically placed into a message store, e.g. a web server, on 
the sender side. The reference notification sent to the desired recipient/s 
points to this location. Since the actual message content still resides with 
the sender, the sender can have a degree of control over that information 
even after the message has been sent, 

10 According to one aspect of the invention we provide a method of 
communicating data over a network from a user terminal to an intended 
recipient terminal at a remote location, the method comprising the steps 
of: 

(a) the user terminal specifying a confidential message store address 
15 of a server that is capable of being accessed by the recipient 

computer via the network; 

" (b) the user computer transmitting said data to said store address to 
reside therein; 



20 



(c) the user terminal transmitting a message over the network to the 
recipient, said message incorporating said selected store address and 
an instruction to the intended recipient to communicate with said 
store address; and 



(d) said recipient terminal accessing said store address to retrieve 
said data. 



The message store address may be a pre-allocated address or it may be an 
address that is selected from a range of possible addresses. 

It can sometimes be more important urgently to notify an intended 
recipient of an e-mail than the actual content of the e-mail itself. There 
5 can. therefore, be occasions on which it is preferred that step (c) is 
performed prior to step (b), and the user's terminal is preferably 
configured to provide for this option. Thus, the reference to location 
may on occasion be transmitted to the recipient even before the e-mail 
message has been composed. 

10 Although the user terminal might be a mobile telephone, preferably the 
user terminal is a PC. personal computer (comprising CPU. ROM. RAM, 
input/output and non-volatile memory). 

The connection between the personal computer and the internet can be 
through a modem and telephone line via a private network service 
15 provider that is directly connected to the internet, through an ISP. 
internet service provider, who is directly connected to the internet, or via 
a direct high-speed data connection. 

The server is preferably incorporated into the PC. This has the 
advantage, over use of a remote server, of the PC more easily monitoring 
20 access of the store address, and implementing any authentication controls 
which may be considered desirable over the accessing of the data from 
the store address. 

The arrangement may permit unlimited accessing of the store address, 
but preferably only a predetermined number of access events is permitted 
25 which may be one only. 
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It may, for example, be desired that only a small number of people, from 
a larger pool of people to whom the notification of an available e-mail 
has been sent, are required to read a message before the message is to be 
deleted from the store address, for example the limited number of people 
5 to be given free tickets to an event. 

The method may comprise an authentication step which must be 
successfully completed prior to the recipient terminal being permitted to 
access the store address, said authentication step comprising an 
authentication communication between the recipient terminal and the 
10 server, the server determining from the identity proffered by the user 
terminal whether or not to allow access to the data. 

According to a second aspect of the invention we provide a computer 
terminal capable of transmitting data over a network to a remote recipient 
computer, wherein the computer terminal is configured such that on 

15 inputting of an instruction to cause data to be transmitted to a recipient 
computer, the transmitting terminal instead specifies a confidential 
message store address on a server that is capable of being accessed via 
the network by the recipient computer, the transmitting terminal 
transmits the data to that store address, and sends an alerting message via 

20 the network to the recipient computer, the alerting message being 
composed to provide notification that data is available to the recipient 
computer by accessing the particular store address. 

In order to provide the sender with some time to review and possibly 
change an e-mail message that has been *seni\ the computer terminal 
25 may comprise a delay timer for delaying the transfer of data from the 
computer terminal to the message store address until a predetermined 
time has elapsed after the terminal attempted to issue the alert message to 
the recipient computer. 



BRIEF DESCRIPTION OF THE DRAWINGS 



Some embodiments of the invention will now be described, by way of 
example only, with references to the accompanying drawings in which:- 

Figure 1 is a schematic flow diagram showing an e-mail 
communication procedure in accordance with the invention; 

Figure 2 is a schematic of the nodes involved in the communication 
procedure of Figure 1 ; and 

Figure 3 is a schematic similar to Figure 2 but showing the use of a 
personal web server. 

DESCRIPTION OF PREFERRED EMBODIMENTS 

With reference to Figure 2. PCI is a personal computer with which a 
user desires to send an e-mail message to a recipient address which is the 
address associated with a personal computer PC2 which is remote from 
PCI. Internet service providers ISPl and ISP2 provide links respectively 
between PCI and the internet, and PC2 and the internet. ISPl also 
provides a web server over which PCI has certain rights in relation to an 
allocation of storage sites on the web server. 

As shown in Figure 1. when the user of PCI desires to send an e-mail to 
the intended recipient at PC2, the composed e-mail message is first 
transmitted by way of modem Ml to a web server WSI provided by an 
internet service provider ISPl. WSI contains a plurality of storage 
locations which are available for use by PCI. and a selection of one of 
these allocated storage locations is selected by software in PCI 
performing a random selection procedure amongst the addresses of the 
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allocated storage locations, and the e-mail message is read into that 
selected location. 

As described so far, in principle the data in the chosen storage location is 
available to anyone having a connection with the internet, but they do not 
5 know the address, and moreover they are not aware of how to satisfy an 
authentication procedure that would allow them access to the data. 

Once the e-mail message has been read into the web server WSl a 
message, in the form of a reference notification, is then sent to PC2, via 
modem Ml. ISPl, an internet connection, ISP2 and modem M2, to 
10 inform PC2 that an e-mail message from the named user (or organisation) 
of PCI has been stored at the particular storage address of WSl. 

When the user of PC2, the intended recipient, checks PC2 to see what e- 
mails have been received, and sees that an e-mail has been 'sent' by the 
user of PCI. when the user then attempts to open-up the e-mail the 
15 opening-up procedure will cause PC2. by appropriate software, to 
attempt to access the specific storage location of WS2. 

Preferably the attempt to access the specific storage location of WSl is 
accompanied by the supply to ISPl of a suitable proof of identity of the 
intended recipient of the e-mail, and this proof of identity is checked by 
20 ISPl before permitting PC2 to access the stored e-mail message. 

The proof of identity could contain a digitally signed hash of the actual e- 
mail message, the hash having been included in the reference 
notification. In the circumstances that PCI incorporates an integral web 
server then the procedure is different, as follows: 



•) 



In the flow diagram of Figure 1. and as just described, the first step in 
the procedure involves storage of the e-mail message in the selected 
storage location, and the second step is to notify the recipient computer 
of the existence of an e-mail. However, there can be an advantage to the 
5 user in some circumstances of first notifying the intended recipient of the 
proposal to provide an e-mail, before the e-mail message has been 
finalised for sending to the selected storage location. 

It will be appreciated that, as far as the recipient computer PC2 is 
concerned, it has received an e-mail notification at the time at which it 
10 receives the notification from PCl- 

Even once the reference notification has been transmitted to PC2. the 
sender is able to amend or replace the initial message stored in the 
specific storage location. 

Figure 3 shows a modification to the system of Figure 2. Corresponding 
15 reference numerals have been applied to corresponding components. The 
system of Figure 3 differs from that of Figure 2 in that the web server 
WSr is a personal web server, such as MICROSOFT™ PWS. running on 
PCI. 

It will be appreciated that the foregoing embodiments of the invention 
20 can provide the following benefits:- 

i) deletion of an e-mail message sent in error if receiver has not 
already viewed it, 

ii) authentication prior to read. 



iii) archive message immediately. 
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iv) insist on not receiving it because they do not access it, 

v) guarantee delete after read/x people have read it. 




CLAIMS 

1. A method of communicating data over a network from a user 
terminal (PCI) to an intended recipient terminal (PC2) at a remote 
location, characterised by the steps of: 

5 (a) the user terminal specifying a confidential message store address 

of a server (WSl) that is capable of being accessed by the recipient 
computer via the network; 

(b) the user computer transmitting said data to said store address to 
reside therein; 

10 (c) the user terminal transmitting a message over the network to the 

recipient, said message incorporating said selected store address and 
an instruction to the intended recipient to communicate with said 
store address; and 

(d) said recipient terminal accessing said store address to retrieve 
15 said data. 

2. The method of claim 1 in which step (a) comprises selecting the 
message store address from a range of possible addresses. 

3. The method of claim 1 or claim 2 in which step (c) is performed 
before step (b). 

20 4. The method of any one of claims 1 to 3 in which the user terminal 
is a personal computer (PCI). 
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5. The method of any one of claims 1 to 3 in which the user terminal 
is a mobile telephone. 

6. The method of claim 4 in which the data store address is an address 
of a server incorporated into the personal computer. 

7. The method of any one of claims 1 to 5 in which the message store 
is a server that is remote from the user terminal. 

8. The method of any one of the preceding claims comprising the 
additional step of (e) monitoring the accessing by the recipient terminal 
of the data from the data store. 

9. The method of claim 8 comprising the additional step of deleting the 
data from the data store following accessing of the data by the recipient 
terminal. 

10. The method of claim 8 comprising the additional step of deleting the 
data from the data store following accessing of the data by a 
predetermined number of recipient terminals. 

11. The method of any one of the preceding claims comprising an 
authentication step which must be successfully completed prior to the 
recipient terminal being permitted to access the store address, said 
authentication step comprising an authentication communication between 
the recipient terminal and the server, the server determining from the 
identity proffered by the user terminal whether or not to allow access to 
the data. 

12. The method of any one of the preceding claims in which the 
network is the internet. 
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13. A computer terminal (PCI) capable of transmitting data over a 
network to a remote recipient computer (PC2), characterised in that the 
computer terminal is configured such that on inputting of an instruction 
to cause data to be transmitted to a recipient computer, the transmitting 

5 terminal instead selects a confidential message store address on a server 
(WSl) that is capable of being accessed via the network by the recipient 
computer, the transmitting terminal transmits the data to that store 
address, and sends an alerting message via the network to the recipient 
computer, the alerting message being composed to provide notification 

10 that data is available to the recipient computer by accessing the particular 
store address. 

14. A computer terminal as claimed in claim 13 comprising a delay 
timer for delaying the transfer of data from the computer terminal to the 
message store address until a predetermined time has elapsed after the 

15 terminal attempted to issue the alert message to the recipient computer. 

15. A computer terminal as claimed in claim 13 or claim 14 in the form 
of a personal computer, the server (WSl') being incorporated into the 
personal computer. 

16. A computer terminal as claimed in claim 15 in which the server is 
20 arranged to monitor accessing of the selected message address and to 

provide a report on such accessing, the report being made available to 
the user of the terminal. 

17. A computer terminal as claimed in any one of claims 13 to 16 
comprising authentication checking means for receiving and checking a 

25 proof of identity proffered by a recipient computer prior to allowing the 
recipient computer to access the data at the store address. 
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ABSTRACT 

TRANSMISSION CONTROLS ON 
DATA COMMUNICATION SUCH AS E-MAIL 

The invention provides a method of communicating data, such as an 
e-mail, over a network ifrom a user terminal PCI to an intended recipient 
terminal PC2 at a remote location, the method comprising the steps of: 

(a) the user terminal PCI specifying a confidential message store 
address of a server WSl that is capable of being accessed by the 
recipient computer via the network; 

(b) the user computer transmitting the data to the store address to 
reside therein; and 

(c) the user terminal PCI transmitting a message over- the network 
to the recipient, the message incorporating the selected store 
address and an instruction to the intended recipient to communicate 
with the store address. 

The recipient terminal on opening up the e-mail accesses the store 
address to retrieve the e-mail. 



Figure 2 
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